- dns-wg - mailman.ripe.net

RIPE 77 DNS WG Agenda
by Dave Knight 14 Sep '18

14 Sep '18

Colleagues, Here’s the agenda for the DNS Working Group sessions at the RIPE 77 meeting in Amsterdam. Kind regards, Dave === Session 1, Wednesday 17 October, 09:00-10:30 === A. Administrivia - Agenda bashing - Review of action items - Approval of previous minutes - Selection of new co-chair B. DNS OARC Update, Keith Mitchell DNS-OARC regularly co-locates its Domain Name Systems Operations Workshops with RIPE, and is doing so again jointly with CENTR-Tech in Amsterdam immediately before RIPE77. OARC seeks to bridge the DNS clue gap through knowledge sharing, data gathering/analysis, community building, and outreach. This talk will give an introduction and summary for the wider RIPE audience of the latest DNS material freshly presented at OARC29 (see https://indico.dns-oarc.net/event/29/contributions/ for topics), and will include a pick of the best new DNS technology deployment experiences, best practices, data, and analysis, with pointers to sources of further information. C. Update on the Root KSK Roll, Roy Arends D. Will your DNS break in 2019?, Petr Špaček Is your authoritative server ready for changes in 2019? Group of DNS software vendors is removing support for certain types of non-compliance with DNS standards. This talk will explain what https://dnsflagday.net/ means for you and how to prepare your DNS infrastructure to minimize impact. E. Managing DNS zones using Git, Ondřej Caletka Why ISPs like us edit zone files manually. The most common errors and how to fight them. Introducing dzonegit, custom open-source solution to keep zone files in Git. === Session 2, Thursday 18 October, 14:00-15:30 === F. RIPE NCC Report, Anand Buddhdev Switching to a new DNSSEC signer. Upcoming 100Gig site for K-root. G. GeoIP + DNSSEC in Knot DNS, Petr Špaček In this talk we will briefly introduce a new response tailoring feature of Knot DNS 2.7, an open-source authoritative-only DNS server developed by CZ.NIC. We will show how to configure Knot DNS server to tailor responses to queries according to client's geographic location or subnet the client belongs to. The module can be used securely with DNSSEC, either effectively by precomputing signatures at load, or online in cooperation with Knot DNS's Online Sign module. H. IETF DNSOP WG Update, Benno Overeinder A short summary of current activities/drafts/discussions/views in the DNSOP WG. We would like to have RIPE participant (operator) input on the current discussions and drafts. I. Updated Measurements on DNS Privacy, Sara Dickinson An update on the benchmarking of TCP/TLS for recursive resolvers presented at RIPE 76. J. Any Other Business

1 0

Draft minutes from the DNS working group at RIPE 76
by Shane Kerr 04 Sep '18

04 Sep '18

DNS Colleagues, Draft minutes from the DNS working group at RIPE 76 are available here: https://www.ripe.net/participate/ripe/wg/dns/minutes/dns-working-group-minu… Please send any corrections to the DNS working group chairs at <dns-wg-chairs(a)ripe.net>. Cheers, -- Dave, Joao, and Shane RIPE DNS Working Group Chairs

1 0

Call for contributions to the RIPE 77 meeting of the DNS wg
by Dave Knight 12 Aug '18

12 Aug '18

Dear colleagues, The RIPE 77 meeting in Amsterdam is a few weeks away and we’d like to form our agenda. Please submit your presentation ideas, or suggestions for discussions to <dns-wg-chairs(a)ripe.net <mailto:dns-wg-chairs@ripe.net>>. Please don’t submit anything using the meeting submission web form, it’s not intended for submission of content to working groups. Thanks! dave, on behalf of the working group chairs

1 0

Call for contributions to the RIPE 77 meeting of the DNS wg
by Dave Knight 12 Aug '18

12 Aug '18

Dear colleagues, The RIPE 77 meeting in Amsterdam is a few weeks away and we’d like to form our agenda. Please submit your presentation ideas, or suggestions for discussions to <dns-wg-chairs(a)ripe.net <mailto:dns-wg-chairs@ripe.net>>. Please don’t submit anything using the meeting submission web form, it’s not intended for submission of content to working groups. Thanks! dave, on behalf of the working group chairs

1 0

New on RIPE Labs: The Uncertainty of Measuring the DNS
by Mirjam Kuehne 18 Jul '18

18 Jul '18

Dear colleagues, Please red this interesting article by Geoff Huston in which he discusses the uncertainties of measuring the DNS and what this means for the roll of the Key Signing Key (KSK) of the Root Zone: https://labs.ripe.net/Members/gih/the-uncertainty-of-measuring-the-dns Kind regards, Mirjam Kühne RIPE NCC

1 0

DNS working group chair selection
by Shane Kerr 17 Jul '18

17 Jul '18

Hello DNS working group, Introduction ------------ We will be starting the selection process for the RIPE DNS working group chair soon. This mail provides information about the process, including a small change, as well as a timeline for the next one. Current DNS Working Group Chair Selection Process ------------------------------------------------- The DNS working group chair selection process is documented here: https://www.ripe.net/participate/ripe/wg/dns/dns-wg-chair-selection-process We have 3 co-chairs so each chair's term is 3 years. Tweak to the Process -------------------- A change was proposed by the working group chairs in the last RIPE DNS working group session at RIPE 76. All of the current chairs noticed that they were the first person who volunteered for the position, and support on the mailing list started immediately. We feel that this gives an unfair advantage to the first person, and discourages possibly equally- or better-qualified potential chairs. So, for the next selection, applicants will be asked to send their information to the DNS working group chairs directly. We will then release the names and statements of all applicants at the same time, where usual discussion and support (or opposition) for them can be offered on the mailing list. Upcoming DNS Working Group Chair Selection ------------------------------------------ RIPE 77 will be David Knight's 6th meeting as DNS working group co-chair, so his co-chair position needs to be filled. He is able to volunteer again; if he does so his name will be released at the same time as all other volunteers. The timeline will be: * 2018-08-31 The call for co-chair volunteers will be issued. * 2018-09-23 The call for co-chair volunteers closes. * 2018-09-24 The list of volunteers will be published to the mailing list. * 2018-10-17 At the DNS working group session at RIPE 77 João and Shane will announce consensus based on the mailing list discussion. As always, please feel free to reach out to any of the chairs directly, to us as a group at dns-wg-chairs(a)ripe.net, or discuss this or any other any relevant topic on this mailing list. Cheers, -- Shane

1 0

General survey about situation of website blocking in your country/economy <by July 10th>
by Akira Shibuya 28 Jun '18

28 Jun '18

Dear dns-wg members, JPNIC - Japan Network Information Center is now soliciting your input about the situation of website blocking all over the world, especially from the viewpoint of copyright infringement. In order to cope with vicious infringements, the Japanese government is considering countermeasures including the legislation of website blocking, alleging that blocking technologies are already being operated in many countries and regions of the world(*). JPNIC wants to grasp the real situation of the world. We would be grateful if you could answer the survey below by July 10th. https://docs.google.com/forms/d/e/1FAIpQLSfgxaDgDwHbWOv7RNbHYTRbNHQa_HFCPv0… It would be highly appreciated if you could kindly provide us with your input. (*)Background: Japan calls for 'emergency measure’blocking access to websites that pirate manga and anime https://www.japantimes.co.jp/news/2018/04/13/national/japan-calls-emergency… If you have any question about the survey, please feel free to email us at: web-blocking(a)nic.ad.jp All the Best, Akira Shibuya (on behalf of JPNIC secretariat)

1 0

Call For Presentations - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Anand Buddhdev 26 Jun '18

26 Jun '18

The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted on the first day of the workshop, until 4pm. The second afternoon of the workshop will start with a Members-only session which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. The Members-only session will be followed by the AGM. Workshop Milestones: 15 Jun 2018 - Submissions and Registrations open via Indico 13 Jul 2018 - Deadline for submission 17 Aug 2018 - Contribution list published 14 Sep 2018 - Full agenda published 06 Oct 2018 - Deadline for slideset submission 13 Oct 2018 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/29/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Anand Buddhdev, for the joint Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

SLD .gov.* within european countries
by Antonio Prado 26 Jun '18

26 Jun '18

hi, I hope you can help me on a not-so-related-to-DNS question. does the SLD .gov.* within european countries' ccTLDs identify only central government bodies and not local government or other public administrations as well? thank you -- antonio

17 24

Re: [dns-wg] [dns-operations] Announcement - DNS flag day on 2019-02-01
by Florian Weimer 14 Jun '18

14 Jun '18

* Paul Vixie: > Florian Weimer wrote: > ... >> >> Or you can avoid fragmentation in the first place, ... > > so, just always use tcp if you're expecting more than 1200 octets? Sure, unless it's a special dedicated network etc. >> Theoretically, even with a 1200-byte EDNS buffer size, ... > > but, there are useful answers larger than that. A lot of those answers are artificially inflated with data that clients cannot use anyway. >> Another benefit of this change is that many of the ENDS-related >> problems go away. > > i'd rather we broke everything that won't let edns through. the internet > can't grow in avoidance-mode. we have to confront, too. It's not clear to moe at all what value larger packets provide. You may avoid the occasional TCP transaction. But then there are weird corner cases, such as the difficulty of serving UDP over IPv6 in a stateless fashion, while still supporting fragmentation.

1 0